Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b411c204-8c6e-47cd-879b-e0f491ae29bb.roa
File:                     b411c204-8c6e-47cd-879b-e0f491ae29bb.roa (raw, json)
Hash identifier:          6VfWaW1HQcHaKrQuPqFAh7/dg1pDimPbN7Bf4d0199I=
Subject key identifier:   9E:C2:29:8F:06:45:B4:BB:06:B1:3F:96:03:2E:64:7B:22:24:DB:43
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       02F480DF314A6A05491D179F2E2A8ECB5761A654
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b411c204-8c6e-47cd-879b-e0f491ae29bb.roa
Signing time:             Thu 12 Feb 2026 02:01:26 +0000
ROA not before:           Thu 12 Feb 2026 02:01:26 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ebe::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f4:80:df:31:4a:6a:05:49:1d:17:9f:2e:2a:8e:cb:57:61:a6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 02:01:26 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=58d3aac87066edae958ec681ec8a0dbbff843e495c5fa851b4e3bee8a06e6e2a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:75:2e:79:77:70:94:ad:33:85:f7:31:9a:
                    64:15:7c:f7:c1:4d:08:a6:b3:78:e6:0d:6b:5f:84:
                    6c:cf:9a:cd:7a:1c:f8:4b:74:ae:17:21:af:1b:f1:
                    e8:2d:66:ed:eb:0d:e2:1c:e3:d2:4c:7f:91:7d:af:
                    d3:50:8e:f2:c3:b3:b6:0b:28:63:86:27:3e:66:3d:
                    d6:5a:23:e8:78:a5:69:31:da:96:d9:61:ce:44:1e:
                    82:79:ad:13:10:37:82:23:bb:96:5d:bf:e1:33:15:
                    be:11:7b:f6:20:27:1f:f9:1e:43:8a:ac:b5:65:3d:
                    68:4c:53:23:87:2a:44:cb:a3:09:94:26:59:c9:26:
                    25:d2:d9:05:32:4c:eb:e1:6d:82:05:70:da:6f:d5:
                    b4:d2:ce:90:af:08:e6:f9:ea:94:44:86:7c:ad:ba:
                    45:bf:d9:a9:09:c2:cd:61:14:af:de:96:20:16:0a:
                    68:19:84:e3:0e:38:59:82:64:ad:30:7b:f8:24:f8:
                    96:80:57:a9:63:4b:7c:1e:8b:72:11:12:5c:bc:da:
                    fd:eb:e2:ff:aa:9c:29:ab:28:c0:d6:1e:76:3c:43:
                    20:87:4e:1a:32:51:c3:c8:bb:21:6d:9e:ee:d6:8e:
                    9b:a6:3f:fe:93:8b:cb:41:44:67:6a:52:4a:f1:31:
                    b6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C2:29:8F:06:45:B4:BB:06:B1:3F:96:03:2E:64:7B:22:24:DB:43
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b411c204-8c6e-47cd-879b-e0f491ae29bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ebe::/47

    Signature Algorithm: sha256WithRSAEncryption
         62:79:ab:cb:fa:54:ec:fb:c8:3e:9e:32:80:d7:c6:32:ed:c2:
         af:52:a2:79:3e:a5:85:39:da:c2:0c:83:35:f1:28:0b:72:d5:
         ba:f3:dc:ad:3f:97:5f:94:89:67:5f:cb:3c:34:df:59:15:4e:
         d1:1c:01:70:46:71:e2:2a:4c:2f:ed:86:5a:9e:e0:a0:fe:0a:
         ba:cd:4c:37:ef:23:d9:ca:d7:5e:c0:9a:93:26:55:39:ac:42:
         3d:09:68:c9:f0:73:4b:d4:b9:ce:80:66:b3:26:a5:26:ff:8b:
         89:af:4a:47:9e:10:5a:c2:4d:d3:d3:36:f2:a9:c0:35:c2:f4:
         28:ed:85:83:4c:fe:4e:a7:05:ec:13:df:df:a3:63:62:55:b8:
         0a:b2:9d:1f:a6:37:12:43:41:a1:5a:0c:a9:15:5d:bc:75:20:
         6e:b1:1b:df:da:1d:53:d0:43:95:73:f9:b1:ad:8e:41:bf:25:
         37:21:08:d7:c1:71:c1:88:16:c7:e1:52:dd:97:be:41:68:37:
         dd:fe:4c:30:25:b1:1f:24:35:94:97:c7:70:29:d7:12:f4:54:
         8b:6f:7d:3e:50:9b:01:70:52:c0:a0:03:ca:dd:64:9f:d3:1f:
         7f:21:27:64:0f:56:98:e9:2c:d0:33:26:4c:6c:f4:bc:08:2e:
         91:8c:96:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:48:26 2026 by rpki-client